Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143644.roa
File: AS143644.roa (raw, json)
Hash identifier: oIvzPrxwyTZGng1VGTtOk9wq3Ujbq5xsS7VT1GAA+08=
Subject key identifier: FB:7E:4D:59:CE:A3:12:5A:0D:FC:27:49:EB:D5:59:19:33:6A:CA:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BB428EED56B9976DED7872FFAD4FED9A35482D9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143644.roa
Signing time: Mon 25 May 2026 06:48:47 +0000
ROA not before: Mon 25 May 2026 06:43:47 +0000
ROA not after: Mon 24 May 2027 06:48:47 +0000
asID: 143644
IP address blocks: 240a:a3e2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b4:28:ee:d5:6b:99:76:de:d7:87:2f:fa:d4:fe:d9:a3:54:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:47 2026 GMT
Not After : May 24 06:48:47 2027 GMT
Subject: CN=FB7E4D59CEA3125A0DFC2749EBD55919336ACA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:69:ac:13:af:b0:f1:ca:d8:db:ff:2c:32:
7b:30:dc:89:35:d5:e3:11:97:db:98:81:ef:10:11:
08:67:06:70:27:3b:d8:da:75:58:4a:5f:d4:66:76:
9c:1b:09:ff:84:92:e5:0d:f5:5d:c8:22:93:c8:51:
96:37:49:b0:6d:85:e4:e1:f8:dc:68:27:aa:ab:f7:
43:bc:ed:e0:14:75:03:97:75:11:cc:7c:f8:5a:41:
83:f5:fc:85:eb:c4:ad:d6:bf:d9:37:d0:d3:70:16:
81:4f:ab:c7:af:f1:ea:b1:a1:d9:dc:05:51:9c:87:
ea:fe:3e:d9:c9:2e:24:58:e8:e3:e0:d7:27:36:a4:
19:1f:e2:18:6e:f4:11:fc:05:e3:aa:a9:fb:d3:c0:
2f:b0:d7:9f:21:29:f7:1c:96:04:c2:0b:c0:5e:c5:
32:d7:57:bd:b2:00:a4:50:91:45:a6:b0:e9:1c:45:
25:27:f9:91:1a:61:cf:69:b8:c8:2d:0b:9b:d6:f9:
d5:e7:f5:ee:09:60:b9:0a:67:64:41:35:d8:c4:4c:
e2:3c:8b:be:9f:9a:f4:8b:67:90:e1:4e:ca:da:d0:
4b:67:d6:3c:9d:94:7f:f5:4a:69:be:4f:79:89:85:
4a:e0:2c:04:9d:37:72:70:42:3d:91:aa:89:9a:95:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:4D:59:CE:A3:12:5A:0D:FC:27:49:EB:D5:59:19:33:6A:CA:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3e2::/32
Signature Algorithm: sha256WithRSAEncryption
9d:5a:6e:da:f1:dc:e8:0a:26:ee:1d:83:cf:84:87:fb:1c:cd:
09:85:76:86:f1:66:a7:85:f3:ef:f3:17:fa:fb:54:c3:2b:99:
9e:3b:11:16:a5:a3:78:8f:e7:2f:82:d9:b8:b1:81:3f:e2:93:
f4:34:a9:e3:9d:17:ba:71:5b:8f:79:87:2b:e2:49:61:e8:f7:
2a:3d:25:82:e4:f5:88:78:0d:7b:8c:ad:52:f4:88:6a:9d:27:
1f:ad:08:ba:b5:d0:a6:c9:8c:b2:52:e0:4e:4e:86:e1:c9:00:
44:f2:de:56:95:60:a3:cb:9d:5e:5a:9b:2a:6c:fe:10:b7:70:
a4:6f:5f:12:c1:6d:55:41:7f:12:16:86:57:c2:48:f9:e2:db:
c0:3d:07:3f:9e:63:38:79:be:c5:2f:59:2b:0c:1c:a8:31:3c:
a3:54:09:e1:1a:8d:90:b6:6d:93:60:69:4e:67:c8:72:7d:a5:
52:65:72:51:92:45:31:ea:7e:65:c3:e0:dd:11:b6:a6:23:aa:
5e:72:60:36:bc:31:db:d7:5e:5d:a8:cf:b0:25:36:f0:6b:bf:
a6:d2:1e:48:98:ae:25:e8:b0:4a:56:6a:20:b1:f8:99:72:f0:
ae:c0:9f:96:3e:40:5d:32:68:0c:e5:1e:fc:01:9e:ee:f5:28:
c4:47:52:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client